joscha / play-authenticate

An authentication plugin for Play Framework 2.x (Java)
http://joscha.github.com/play-authenticate/
Other
807 stars 366 forks source link

Authorization #340

Open 030 opened 7 years ago

030 commented 7 years ago

Authentication works, but does this project also support authorization? E.g. userA could authenticate, but is not authorized to view this page, while userB is allowed.

oexza commented 7 years ago

check out the PlayAuthenticate usage sample, it uses deadbolt for authorisation.

On 6/22/17, 030 notifications@github.com wrote:

Authentication works, but does this project also support authorization? E.g. userA could authenticate, but is not authorized to view this page, while userB is.

-- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/joscha/play-authenticate/issues/340

030 commented 7 years ago

Shall I create a PR if the deadbolt works as the related README section seems to be empty https://github.com/joscha/play-authenticate/blob/master/samples/java/Getting%20Started.md#using-deadbolt

oexza commented 7 years ago

Sounds good to me. @joscha ??

On 6/22/17, 030 notifications@github.com wrote:

Shall I create PR if the deadbolt works as the related README section seems to be empty https://github.com/joscha/play-authenticate/blob/master/samples/java/Getting%20Started.md#using-deadbolt

-- You are receiving this because you commented. Reply to this email directly or view it on GitHub: https://github.com/joscha/play-authenticate/issues/340#issuecomment-310444406

joscha commented 7 years ago

@030 sure, have a look at the sample app, deadbolt is in there - the Getting started guide is quite outdated, any updates are highly appreciated.

Thanks for your support @oexza!

030 commented 7 years ago

@oexza and @joscha I have read the deadbolt documentation and checked the sample code, made some changes to understand it more and tried to explain how one could prevent that users could see certain content by pasting an example from the sample app. Could you review the PR?